This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa File: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (raw, json) Hash identifier: 4OzsKvBSfm4qxWdmyoh6RPRjjzRXkTTDF2Ws0hpOmug= Subject key identifier: D2:03:65:D8:35:30:EE:64:1A:F5:B1:45:4A:8A:55:85:BD:9F:C1:89 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584C09A0A2501A397C3409D8948E Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 401770 IP address blocks: 2604:13e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:a2:50:1a:39:7c:34:09:d8:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=95c3ee24-a712-4d37-a260-45487ccecd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:ad:49:43:58:c5:c8:1e:67:ac:1c:a5:3d: 15:10:66:26:d4:d3:d6:f8:d7:e1:26:ad:2f:ee:90: 8a:69:43:92:38:c9:72:0f:58:8b:a2:ea:44:88:25: 9e:db:28:35:c6:6e:9d:c0:b5:1c:54:f6:10:36:af: f3:44:18:82:6e:0f:2d:44:b1:55:53:92:6d:8a:f0: d0:66:01:9c:34:54:51:2c:7d:e8:34:a7:61:3c:d2: af:32:91:0b:7a:93:9b:23:75:9a:47:7a:fb:81:87: 59:8a:86:23:fc:cb:42:29:21:0e:57:1e:a9:de:4f: c5:5b:27:67:40:dc:bf:2d:6c:35:e2:c1:f8:63:ba: c7:1f:b0:1c:96:b0:12:23:4f:03:0a:9e:45:98:1c: e9:6b:e7:94:30:36:fa:b1:b3:c2:bf:ba:47:51:66: 4b:17:34:8e:74:6b:3e:3e:12:ed:90:5d:de:4a:35: e9:f2:e1:78:d5:c6:d1:a7:69:ba:e9:bc:fb:5f:c0: af:13:9b:90:c9:2b:cb:83:4a:e7:99:c2:2d:2b:9a: f2:f4:02:6d:dc:d8:79:90:e9:50:b2:12:d7:cf:5a: f2:87:e7:33:0d:96:85:28:5f:99:fa:a8:be:e3:cc: 88:61:77:b9:bc:bf:45:be:ab:b0:c0:68:5e:a4:a7: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:03:65:D8:35:30:EE:64:1A:F5:B1:45:4A:8A:55:85:BD:9F:C1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv6: 2604:13e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b6:32:59:ba:08:62:33:d6:82:76:ea:99:a5:e9:a6:54:7d: 9f:e4:7b:0d:3e:40:ba:29:6c:f4:5b:ad:b3:d1:5a:0e:c1:8c: 9d:8d:c3:66:45:ab:e1:89:ba:b9:cc:e0:02:66:5a:00:6b:a8: 4e:d0:ae:ca:89:d5:60:c3:a0:85:4f:be:d4:ce:d7:38:81:74: d2:0e:64:c3:92:23:30:89:42:c8:d4:01:a1:2e:14:db:19:a8: da:55:f6:e8:45:db:6f:35:24:19:17:fa:fe:d7:3f:98:7d:16: a9:3e:34:e4:78:1e:f7:ef:3a:46:3f:f0:96:02:12:70:1c:d1: 10:69:12:70:90:1c:f5:5a:79:79:ac:fc:36:14:34:cd:e0:a8: 73:32:50:0f:b0:e0:d9:75:56:01:f5:f9:6d:4b:1b:c7:9b:25: b0:5e:b1:f1:b6:87:74:3e:10:10:a4:98:2f:fd:81:2f:5a:0f: 3c:93:87:4a:15:c8:e0:c1:1c:20:67:92:f7:b3:fb:3a:3b:86: de:5c:90:fd:54:e6:87:77:48:37:4e:c1:81:6c:8c:7e:6f:27: f2:1f:6c:72:23:63:e3:79:c4:9c:c4:7d:cd:46:d8:7c:ad:36: 84:4b:c6:c0:5c:b7:13:48:76:ae:30:d7:68:80:6b:6f:03:f2: f6:84:8a:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwJoKJQGjl8NAnYlI4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk OTVjM2VlMjQtYTcxMi00ZDM3LWEyNjAtNDU0ODdjY2VjZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk2tSUNYxcgeZ6wcpT0VEGYm1NPW+NfhJq0v 7pCKaUOSOMlyD1iLoupEiCWe2yg1xm6dwLUcVPYQNq/zRBiCbg8tRLFVU5JtivDQ ZgGcNFRRLH3oNKdhPNKvMpELepObI3WaR3r7gYdZioYj/MtCKSEOVx6p3k/FWydn QNy/LWw14sH4Y7rHH7AclrASI08DCp5FmBzpa+eUMDb6sbPCv7pHUWZLFzSOdGs+ PhLtkF3eSjXp8uF41cbRp2m66bz7X8CvE5uQySvLg0rnmcItK5ry9AJt3Nh5kOlQ shLXz1ryh+czDZaFKF+Z+qi+48yIYXe5vL9FvquwwGhepKcMbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNIDZdg1MO5kGvWxRUqKVYW9n8GJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvNjgyZTlhNjgtMjZhOS0z NmVjLThlZGMtNTA4MTFiZmU2MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQT4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHtjJZughiM9aCduqZpemmVH2f5HsNPkC6KWz0W62z0VoOwYydjcNm Ravhibq5zOACZloAa6hO0K7KidVgw6CFT77Uztc4gXTSDmTDkiMwiULI1AGhLhTb GajaVfboRdtvNSQZF/r+1z+YfRapPjTkeB737zpGP/CWAhJwHNEQaRJwkBz1Wnl5 rPw2FDTN4KhzMlAPsODZdVYB9fltSxvHmyWwXrHxtod0PhAQpJgv/YEvWg88k4dK FcjgwRwgZ5L3s/s6O4beXJD9VOaHd0g3TsGBbIx+byfyH2xyI2PjecScxH3NRth8 rTaES8bAXLcTSHauMNdogGtvA/L2hIox -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:32 2025 by rpki-client